PT-2026-22454 · Npm · Clawdbot+1

Published 2026-02-18 · Updated 2026-02-18

OSV

CVSS v4.0

6.8

Medium

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Summary

Base64-backed media inputs could be decoded into Buffers before enforcing decoded-size budgets. An attacker supplying oversized base64 payloads can force large allocations, causing memory pressure and denial of service.

Attack Scenario Notes

• Recommended deployments bind the gateway to loopback by default and require gateway auth for HTTP endpoints. In that configuration, this is best modeled as a local/authorized DoS.
• If an operator exposes the gateway to untrusted networks (or disables/weakens auth and rate limits), treat this as a higher-severity network DoS risk.

Affected Packages / Versions

• openclaw (npm): <= 2026.2.13
• clawdbot (npm): <= 2026.1.24-3

Fixed In

• openclaw (npm): 2026.2.14 (planned)
• clawdbot (npm): no patched release planned; migrate to openclaw

Fix Commit(s)

• 31791233d60495725fa012745dde8d6ee69e9595

Credits

Thanks @vincentkoc for reporting.

Fix

Resource Exhaustion

Allocation of Resources Without Limits

Weakness Enumeration

CWE-400

CWE-770

Related Identifiers

GHSA-W2CG-VXX6-5XJG

Affected Products

Clawdbot

Openclaw

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-29612 · Security Note
• https://osv.dev/vulnerability/GHSA-w2cg-vxx6-5xjg · Vendor Advisory
• https://github.com/openclaw/openclaw · Note
• https://github.com/openclaw/openclaw/security/advisories/GHSA-w2cg-vxx6-5xjg · Note
• https://github.com/openclaw/openclaw/commit/31791233d60495725fa012745dde8d6ee69e9595 · Note
• https://github.com/openclaw/openclaw/releases/tag/v2026.2.14 · Note
• https://vulncheck.com/advisories/openclaw-denial-of-service-via-large-base-media-file-decoding · Note